AWS Certified Security Specialty All-in-One Exam Guide (Exam SCS-C01)

CHAPTER 10

Design Edge Security on AWS

In this chapter, you will learn about

•   AWS services to provide edge security

•   How to protect web applications and APIs

•   Protecting your edge against DDoS attacks

•   Using AWS WAF to detect threats in the application layer

AWS provides various services for the edge layer of an application. Some of those services, such as Amazon CloudFront or Amazon Route 53, contain features that are very useful to improve application security. Other services, such as the Web Application Firewall and AWS Shield, are especially designed to secure the edge layer.

Introduction

The architecture diagram seen in Figure 10-1 shows the AWS services used to provide a better level of security in the edge layer. There are ...